A newly created position within the organisation's cyber security function, this role is for an application security specialist who can bring that expertise to bear on how the organisation secures its AI systems. Rather than needing deep AI development background, the focus is on strong application security fundamentals, applied to reviewing and strengthening the security controls wrapped around AI models, tools, and platforms as they're built and deployed internally.
What You'll Do
- Review and assess the security posture of applications and AI-related systems, identifying vulnerabilities and control gaps before they reach production
- Apply application security practices and testing methods to AI models, copilots, and related tooling built by internal teams
- Conduct source code reviews, both for traditional applications and for AI-related codebases, flagging security weaknesses and recommending fixes
- Assess and strengthen the controls surrounding AI systems, drawing on application security principles like secure coding standards, input validation, and access control
- Partner with development and architecture teams to embed security requirements early in the build process rather than catching issues late
- Support threat modelling and risk assessments for applications and AI use cases, translating findings into practical remediation guidance
- Track remediation of identified vulnerabilities through to closure, working with the relevant teams to keep momentum
- Act as a subject matter resource on application security for stakeholders who may not have deep technical backgrounds themselves
What We're Looking For
- Strong background in application security, including secure code review, vulnerability assessment, and secure development practices
- Ability to apply application security thinking to newer or less conventional environments, including AI and ML-adjacent systems
- Comfortable working hands-on with code and technical detail, not just policy or process
- Experience partnering with development and architecture teams to influence how systems get built
- Strong communication skills, able to explain technical risk clearly to both technical and non-technical audiences
- A collaborative, team-first mindset
